Open-source atomic malware analysis

Analyze another

metro-babel-transformer 0.84.4

NPM
Verdict: BENIGN
SHA256: 90c2af271e958ec18324fc63e95cf9949991bc05fe0db762225e91237a725d84
“🚇 Base Babel transformer for Metro.”
Mal-ecule
H₂(FPo)Md(Pa)
Size 3.5 KB download
First seen 3 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Well-known

baseline severity, 95% confident.
app/development Calvyn security audit text

Objectives

component severity, 95% confident.
collection/stealer Platform telemetry field

Micro-behaviors

notable severity, 85% confident.
fs/file Package script deletes files
notable severity, 90% confident.
process/create/shell npm, Yarn, or pnpm run build
baseline severity, 80% confident.
os/env Node process.env access
baseline severity, 85% confident.
os/env/vars JavaScript process.env word assignment

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 85% confident.
build JavaScript transpiler or minifier markers
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 80% confident.
import Requires a scoped npm package
baseline severity, 100% confident.
lang javascript code embedded in string
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package Package version uses numeric SemVer format
baseline severity, 90% confident.
package/dependencies npm manifest omits devDependencies field
baseline severity, 75% confident.
package/keywords Package declares keywords
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension

20 of 28 traits shown

Identity

SHA-256 90c2af271e958ec18324fc63e95cf9949991bc05fe0db762225e91237a725d84
Filename [email protected]
Package metro-babel-transformer
Version 0.84.4
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/metro-babel-transformer/-/metro-babel-transformer-0.84.4.tgz

Timeline

First seen 12 Aug 2026 14:55 UTC
First analyzed 12 Aug 2026 14:54 UTC
Last analyzed 13 Aug 2026 08:47 UTC
Last updated 13 Aug 2026 08:47 UTC

Labeling

Label unknown
Traits version 73866